$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e095d4-2dc6-3a37-925a-3784f36a3b0e.roa File: 40e095d4-2dc6-3a37-925a-3784f36a3b0e.roa (raw, json) Hash identifier: X0UUsPWEMve5qj+jX2bOKBe3gL4Tfww3aKu8EnrCiUg= Subject key identifier: B2:28:8A:9D:91:2A:90:FC:6E:FF:CC:64:CC:7D:CA:28:D0:DD:B6:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5BCD290DAC6F20CFA75780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e095d4-2dc6-3a37-925a-3784f36a3b0e.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 71.239.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:cd:29:0d:ac:6f:20:cf:a7:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=7c70f1bf-0a07-48ab-a9d8-128533798885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:61:a7:83:6a:53:0c:29:53:d6:e6:ae:78: 15:13:50:7c:0e:0f:e2:b6:c9:84:00:45:0a:d1:50: c2:d2:5a:09:fa:6c:fc:e0:1b:f7:d4:2c:e0:f6:a8: de:6c:f1:42:dd:0f:1e:db:8e:56:2d:77:c0:9a:f4: 12:9a:7a:88:19:d3:04:0a:06:52:01:f1:d4:31:02: b3:7d:21:8f:bb:51:72:9b:69:b7:4d:9d:e7:f5:ab: 2f:3a:86:e2:de:ef:88:52:9e:d7:47:a9:6e:42:14: aa:fc:39:39:a3:2e:22:9d:31:d1:a1:55:21:11:bc: 9b:49:c4:a0:b6:35:dd:fa:36:6a:3d:c2:79:f9:7a: 70:f5:8c:79:13:f0:6a:e0:09:36:17:40:2f:cb:79: ed:22:dd:ff:75:ca:3f:a5:88:25:da:d8:6a:49:64: 49:7c:8b:bb:b2:f9:fd:dd:9b:d1:5d:6b:46:8e:24: d2:62:16:cc:85:35:4e:df:11:57:d7:68:4e:3b:fd: 36:a7:5d:fb:37:41:19:14:6d:ff:f5:13:40:df:0b: 81:0a:47:8c:9b:44:f7:37:24:fa:d9:14:87:3c:3b: c0:76:fb:6d:b1:d4:7b:6a:b5:86:b3:41:56:56:5a: cc:99:62:4e:cc:cf:6d:3d:df:ef:ef:07:bd:a2:47: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:28:8A:9D:91:2A:90:FC:6E:FF:CC:64:CC:7D:CA:28:D0:DD:B6:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e095d4-2dc6-3a37-925a-3784f36a3b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:64:74:6f:ee:3d:79:d5:a1:46:72:67:72:84:76:a1:f5:94: ca:2f:71:d0:e3:6c:9b:b5:9f:9f:6f:04:4d:95:45:d6:c8:2d: e6:e4:41:32:9f:0a:48:25:24:8f:49:20:00:ee:87:ef:cc:21: eb:62:4b:04:08:39:16:dd:2c:7f:4a:0a:27:8a:62:51:69:b6: d9:91:8c:ee:db:53:f8:2b:90:e7:4d:76:77:be:36:cb:d5:c7: d9:42:09:f6:19:8b:52:99:ec:d6:d8:ac:d3:4b:6b:34:23:48: 55:da:9e:a0:1c:3e:09:ea:8b:66:ea:8c:09:47:55:fe:f6:84: 8c:77:ae:7a:af:02:d3:ea:bb:d0:00:03:59:e4:dd:b7:19:76: 60:0d:eb:09:53:d7:6a:54:65:a7:26:f9:88:85:16:3b:86:3b: 28:5b:e0:54:3d:13:0f:de:e3:0c:0e:72:28:72:37:98:65:d5: 8d:d1:c0:a0:e2:22:02:e7:3f:0a:42:8e:9d:e0:d6:1f:e2:cd: 25:5e:3f:95:c0:15:d1:04:d8:95:0d:45:56:06:ca:23:ea:ee: a3:54:5b:ae:70:ba:80:59:14:c0:a3:b2:70:c7:41:ef:35:e3: ed:de:c9:ee:b0:77:37:f1:5d:3f:d7:5b:bf:b6:0e:df:26:90: 95:46:49:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW80pDaxvIM+nV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk N2M3MGYxYmYtMGEwNy00OGFiLWE5ZDgtMTI4NTMzNzk4ODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviJhp4NqUwwpU9bmrngVE1B8Dg/itsmEAEUK 0VDC0loJ+mz84Bv31Czg9qjebPFC3Q8e245WLXfAmvQSmnqIGdMECgZSAfHUMQKz fSGPu1Fym2m3TZ3n9asvOobi3u+IUp7XR6luQhSq/Dk5oy4inTHRoVUhEbybScSg tjXd+jZqPcJ5+Xpw9Yx5E/Bq4Ak2F0Avy3ntIt3/dco/pYgl2thqSWRJfIu7svn9 3ZvRXWtGjiTSYhbMhTVO3xFX12hOO/02p137N0EZFG3/9RNA3wuBCkeMm0T3NyT6 2RSHPDvAdvttsdR7arWGs0FWVlrMmWJOzM9tPd/v7we9okeAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIoip2RKpD8bv/MZMx9yijQ3bYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBlMDk1ZDQtMmRjNi0z YTM3LTkyNWEtMzc4NGYzNmEzYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+9+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNkdG/uPXnVoUZyZ3KEdqH1lMovcdDjbJu1n59vBE2VRdbILebkQTKf CkglJI9JIADuh+/MIetiSwQIORbdLH9KCieKYlFpttmRjO7bU/grkOdNdne+NsvV x9lCCfYZi1KZ7NbYrNNLazQjSFXanqAcPgnqi2bqjAlHVf72hIx3rnqvAtPqu9AA A1nk3bcZdmAN6wlT12pUZacm+YiFFjuGOyhb4FQ9Ew/e4wwOcihyN5hl1Y3RwKDi IgLnPwpCjp3g1h/izSVeP5XAFdEE2JUNRVYGyiPq7qNUW65wuoBZFMCjsnDHQe81 4+3eye6wdzfxXT/XW7+2Dt8mkJVGSdw= -----END CERTIFICATE-----Generated at Mon Mar 2 02:35:57 2026 by rpki-client